Citát Sami Ketola <[email protected]>:

On 12 Jul 2017, at 15.46, Rick Romero <[email protected]> wrote:
This is awesome, as I was just contemplating how to maintain persistence with 2FA. Is it possible to use a passdb based on remote ip? There's a username_filter, but I want to use a master password for webmail (which will use 2FA via Radius), and those IPs are known and non-routable.


passdb {
  driver = static
  args = password=masterpassword allow_nets=192.168.0.0/24
}

or can even use single ip like allow_nets=192.168.1.234

Sami



Thanks guys, i reworked it like this (i already allowed only proxy IP on firewall but thanks for suggestion, i added also allow_nets, just to be sure) and everything is working fine.

azur

Reply via email to